The honest privacy policy.

When you create an account and use Actify, we collect:

• Account information: your name and email address, provided directly or via Google Sign-In.
• Profile information you provide during onboarding: target score, current score, test dates, and preferred study schedule.
• Practice data: questions attempted, answers selected, accuracy percentages, time spent per question, and section scores.
• Device and browser information collected automatically by Vercel Analytics (page views, referrer, browser type, country — no personal identifiers).

We do not collect:

• Payment or billing information (Actify is free).
• Social Security numbers or government-issued IDs.
• Full home addresses.
• Precise geolocation.
• Date of birth (we require only that you confirm you are at least 13).

Actify offers Google Sign-In as an authentication option, powered by Supabase Auth. When you sign in with Google, we receive basic profile information from Google, including:

• Your name
• Your email address
• Your Google profile image (displayed as your avatar)

This information is used solely to create and manage your Actify account and save your practice progress. We do not access your Google contacts, Gmail, Google Drive, Google Calendar, or any other Google service beyond basic profile information.

You can also create an account with email and password without connecting a Google account.

Actify uses a small number of cookies and browser storage mechanisms to operate the platform:

• Authentication cookies — set by Supabase to keep you signed in across page visits. These are strictly necessary for the app to function.
• Analytics cookies — set by Vercel Analytics to understand aggregate usage patterns (page views, traffic sources). These do not identify you personally.
• Local storage — used to cache your study schedule on your device so the dashboard loads quickly. No personal data is stored here.

We do not use advertising cookies, cross-site tracking pixels, or any third-party marketing cookies.

• To create and maintain your account and authenticate your identity.
• To personalize your practice experience and track your progress over time.
• To operate, improve, and debug the platform.
• To send transactional emails (password reset, account notifications) when you request them.
• To send a single practice recap email after you complete your first practice session. You can unsubscribe from any of these emails using the link in the message.
• To analyze aggregate usage and improve question quality and platform performance.

We use the following service providers to operate Actify. Each has their own privacy practices and data processing agreements:

• Supabase — database, row-level security, and authentication (including OAuth). Your account data and practice history are stored here. Supabase Privacy Policy ↗
• Vercel — hosting, CDN, and aggregate analytics. Vercel Privacy Policy ↗
• Resend — transactional email delivery (password resets, notifications). Resend Privacy Policy ↗

We do not use any additional third-party analytics, advertising, or tracking services.

Depending on where you live, you may have the following rights regarding your personal data. We honor these requests regardless of your location.

• Access: You can request a copy of the personal data we hold about you.
• Correction: You can update your name, email, target score, and other profile information directly in the app, or by contacting us.
• Deletion: You can request permanent deletion of your account and all associated data via our Data Deletion page or by emailing us.
• Objection: You can object to our processing of your data for purposes beyond operating the platform.
• Portability: You can request an export of your practice data in a readable format.

To exercise any of these rights, contact us at support@actifyprep.com. We will respond within 30 days.

Actify is intended for users who are at least 13 years old. We do not knowingly collect personal information from children under 13. If we learn that a user under 13 has created an account, we will delete that account and all associated data promptly.

If you believe a child under 13 has created an account, please contact us at support@actifyprep.com.

We retain your account data and practice history for as long as your account is active. If you delete your account, all associated data — including your profile, question attempts, study sessions, and section scores — is permanently deleted from our systems within 30 days.

You can request deletion at any time through our Data Deletion page or by emailing support@actifyprep.com.

In the event of a data breach that may affect your personal information, we will notify affected users promptly — within 72 hours of becoming aware of the breach where feasible. Notification will be sent to the email address associated with your account and, if required by applicable law, to relevant authorities.

We use industry-standard measures to protect your data:

• All connections to Actify are encrypted via HTTPS/TLS.
• Database access is protected by Supabase's row-level security — every query is scoped to your user ID.
• Authentication tokens are verified server-side on every protected request.
• Admin-only endpoints require verified email authentication.

No system is perfectly secure. We cannot guarantee absolute security, but we take reasonable and current best-practice measures to protect your information.

We may update this policy from time to time. The updated date at the top of this page will always reflect when the policy was last changed. For material changes, we will notify users by email or via an in-app notice before the changes take effect. Continued use of Actify after changes constitutes acceptance of the revised policy.

Questions, concerns, or requests about this privacy policy? We're happy to help.

See also: Terms of Use